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Description 

This invention relates to an apparatus and method of recording a transaction, and in particular, but not exclusively, 
to an apparatus and method (or processing signature-based payment transactions, and more particularly, to an appa- 
5 ratus and method in which a merchant's records of payment may be generated and maintained electronically without 
generation or use of paper records except those delivered to customers at the point of sate. 

In retailing and similar areas, the volume of transactions is often such that management of paper records is bur- 
densome. Therefore paper records are being replaced by digital storage media wherever feasible: However,-digital- 
storage devices have not been able to eliminate the need for paper storage in many financial transactions requiring 
10 consumer approval. Typical examples are transactions involving account debit (including check) and charge receipts. 
In such transactions paper documentation bearing a human signature has continued to be the norm. The storage and 
retrieval of such records is both inefficient and costly. 

Known techniques exist for producing digitized facsimiles of human signatures and processing such digitized fac- 
similes to verify the authenticity thereof, as disclosed in US patents 4752 965, 4734 859, 4724542..An apparatus for 
is electronically processing a transaction with a human signature is known from WO-A-91 10207 (publication date: 
1 1 .07.91 ) where a digitized signature signal is combined with a digitized transaction signal to form a record signal which 
is then processed for verification of the transaction. 

The present invention seeks to enhance the security and reliability of the approval and recordal of transactions 
carried out by electronic means. According to the present invention, there is provided transaction recordal apparatus 
20 comprising first generating means for generating a digitized signature record of a signature approving said transaction, 
characterized by second generating means for generating a digitized transaction record representative of said trans- 
action, and means for using said transaction record to encrypt said signature record so as to provide an encrypted 
record for supply to signature and transaction verification means. 

The invention also provides a method ol recording a transaction, comprising the steps of generating a digitized 
2S signature record of a signature approving the transaction, and generating a digitized transaction record representative 
of the transaction characterized by the step of generating an encrypted record of the transaction for supply to signature 
and transaction verification means by using said transaction record to encrypt said signature record. 

The invention advantageously provides for a practical method and apparatus for capturing an image of a signature 
in digital form and combining it with a digital record of the transaction itself so as to provide an encrypted record of the 
30 transaction. Thus, the apparatus and method provide for an effective defence against attempted fraud. In particular, 
the invention can assure that a signature purportedly approving a commercial obligation was captured at the time of 
a questioned transaction and is not a genuine signature obtained on some other occasion and fraudulently merged 
into the digital record of the transaction. 

Also, the present invention provides for a method and apparatus for processing signature-based payment trans- 
35 actions by use of digitized representations of payment documents. 

Further advantages arise in that a method and apparatus are readily provided for generation and signature of an 
electronic payment document which is easily usable by and readily acceptable to a customer. Also, electronic gener- 
ation and electronic signature of a payment document with sufficient security to obviate the need for maintenance of 
paper records are provided which also allows for the generation of a digital record of a commercial transaction which 
40 is secure from tampering. 

The invention is described further hereinafter, by way of example only, with reference to the accompanying drawings 
in which:- 

Fig. 1 is a perspective view of a write input apparatus and associated printer. 
Fig. 2 is a sectional elevational view of the write input apparatus of Fig. 1. 
4 5 Fig. 3 is a plan view of a liquid crystal display module which is used in the write input apparatus of Fig. 1 . 

Fig 4 is an elevational view of the liquid crystal display module of Fig. 3. 

Fig. 5 is a block diagram of a point of sale system which includes the write input apparatus of Fig. 1. 

Fig. 6 is an illustration of a combined bill of sale and credit receipt printed at a point of sale. 

Fig. 6 A is an illustration of a debit memo produced at a point of sale. 
50 Fig. 7 is a flow chart illustrating the production of a digitized transaction record such as the debit memo of Fig. 6A. 

Fig. 8 is a flow diagram of the process employed to transform the coordinates of a position of a transparent digitizer 
to the corresponding coordinates of a display module. 

Fig. 9 is flow diagram of the process employed to provide offset values used in the process of Fig. 8. 

Reference is now made to Fig. 1 , wherein there is shown a perspective view of a write input apparatus 20 which 
55 is coupled to a printer 22 by a connector 21 . Although this is shown as a direct connection or coupling, the actual 
coupling or connection may actually extend through one or more other devices, such as a controller. The write input 
device includes a transparent surface 24 through which information may be displayed and on which information may 
be entered by writing thereon with a stylus 26 by a human operator 28. The stylus 26 is connected to the apparatus 
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by an electrically conductive line 30. The apparatus 20 may also include an integral magnetic stripe reader 32 having 
a slot 34 through which a card bearing magnetic indicia may be swiped so that the data contained thereon may be 
read, stored and used by the system. The write input device 20 may be configured without the magnetic stripe reader 
32, if desired. Thus the present invention contemplates the use of a device for manual data entry instead of or in 

5 addition to the magnetic stripe reader. Also, the system may include a MICR reader for reading magnetically imprinted 
characters on a customer's personal check. This would enable the use of a personal check for identification of a cus- 
tomer's checking account number. 

Printer 22 may print customer "receipts such as the receipt 36 which is shown as issuing from an aperture 38*in— 
the housing of the printer. Details of receipt 36 may be as illustrated in Fig. 6. Other types of records could also be 

to generated by the printer 22, if desired, in response to the needs of the system. Any suitable printer may be employed, 
such as an Epson RP265, marketed by Epson America. Inc., Torrance, California. 

As shown in the sectional view of Fig. 2, write input apparatus 20 has a lower housing 40 and an upper housing 
42, which mate along the edges thereof. The upper housing 42 has an aperture 44 within which is placed a transparent 
interactive digitizer element 46 which is capable of generating electrical signals which represent the position of the 

15 stylus 26 or other device placed in contact therewith. Broadly speaking, during operation of the interactive element 46, 
the stylus 26 acts as a probe and the differing potentials between sides of the element, in two coordinate directions, 
are measured, converted into digital form, and are processed through correction algorithms. This enables a trace of 
the movement of the stylus to be captured and retained, as well as displayed on a liquid crystal display (LCD) module 
48. Interactive elements of this type are commercially available, and one such device which can be employed in the 

20 present invention is the Screenwriter controller/digitizer/pen marketed by MicroTouch Systems Inc., Wilmington, Mas- 
sachusetts. 

Positioned directly beneath the interactive transparent element 46 and having a display screen visible therethrough 
is the liquid crystal display (LCD) module 48 which is capable of displaying information in response to electrical signals 
applied thereto. Information which is read from a card by the magnetic stripe reader 32, or input by a Magnetic Ink 

25 Character Recognition (MICR) device, or manually entered through a keyboard may be supplied to and displayed by 
the LCD module 48. Also, a magnetically encoded card or a keyboard may be used for accessing a look-up table in a 
memory to generate information for displaying graphics on the screen of the LCD module 48. Electrical signals from, 
the interactive element 46 relating to movement of the stylus 26 on the element can then be applied to the LCD module 
48 to provide a representation of a signature on the transaction image. Thus, since the LCD module 48 is positioned 

30 directly beneath the transparent digitizer element 46, the movements of the stylus 26 on the transparent surface 24 
are graphically captured and are immediately visible at the points of contact of the stylus with the surface. Other trans- 
action information may also be manually entered via the write capture surface in the same manner as the signature 
except that its position is correlated to an input grid displayed through the transparent surface for input prompt, e.g., 
numeric keypad image. Such information is recognized from its position and is digitized accordingly. 

35 Figs. 3 and 4 are plan and elevation views of the LCD module 48. A display screen 50 forms part of the top surface 

of the module. A cable 52 provides electrical input connections for supplying power and data signals to the module. 
Electrical conductors 53 provide power to fluorescent tubes for back-lighting the screen 50. Brackets 54 are secured 
to the module to enable it to be mounted securely within the apparatus 20. LCD modules of this type are commercially 
available, and one such module which can be employed in the present invention is Model EG7500, marketed by Epson 

40 America, Inc., Torrance, California. 

The magnetic stripe reader 32 and its slot 34 are shown to be located in the upper left portion of the apparatus 
20, as viewed in Fig. 2. A control circuit board 56 which functions as a controller for the transparent digitizer element 
46 is located below the LCD module 48 in the lower housing 40 of the apparatus 20 and includes a connector 57 for 
connection to the digitizer element 46 and also includes a microcontroller 64. Circuit board 56 may include circuitry for 

45 automatically adjusting the contrast control signal applied to LCD module 48 to correct for temperature induced vari- 
ations in the contrast of the display. 

A point of sale system using the present invention is illustrated in block diagram form in Fig. 5. The system as 
shown therein includes the write capture unit 20, a transaction terminal 1 3 and the optional standalone printer 22. MSR 

32 which is shown in phantom outline within write input unit 20 may be integrated as part of that unit or may be a 
50 standalone device. An optional MICR reader 58 is also shown in phantom outline. The transaction terminal 1 3 may be 

any one of a number of commercially available devices, such as, for instance, a 7052 terminal, marketed by NCR 
Corporation. The optional standalone printer may be of any suitable dot matrix printer offering an RS232 interface, 
such as the NCR 7150 printer. 

Terminal 13 controls the functioning of write input device by means of commands sent over a serial data link 14. 
55 These control commands are received by an input/output buffer 29 and relayed to a microprocessor based I/O controller 

33 for routing to the microcontroller 64. Microcontroller 64 runs one or another of four different programs, as selected 
by control messages from terminal 1 3. Basically, there are four types of messages: 
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DISPLAY 
ACCEPT 
TRANSMIT 
UPDATE 

5 

DISPLAY messages may include character codes for characters to be displayed by LCD module 48. These codes 
are sent by microcontroller 64^to LCD controller 47, which may be, for instance a Display Master Model YDM420 
graphics adapter marketed by Yamaha Corporatioriof America, San Jose, California. LCD controller 47 then converts 
the character codes into row and column commands for displaying the desired characters in dot matrix form. Alterna- 
te lively, DISPLAY messages may cause microcontroller 64 to access its own memory for character codes stored therein 
and send those codes to LCD controller 47 for display. 

ACCEPT messages activate logic that causes microcontroller 64 to sense the activation of stylus 26 and begin 
accepting X.Y coordinate from digitizer 46. This information is captured and 'echoed' to the LCD 48 to provide a 
signature display to the signer in "real time". 
is Receipt of a TRANSMIT message initiates transmission of the signature information to the transaction terminal 

along with other account information obtained from the debit card read by the MSR 32. ( MSR input is also controlled 
via ACCEPT messages.) Encryption means 49 are provided for encrypting the signature information prior to transmis- 
sion to terminal 13. Encryption means 49 may be implemented either in hardware or in software. 

The UPDATE messages are used for causing microcontroller 64 to update its memory with display information for 
20 use in controlling printer 22. 

Upon receipt of the signature information, the terminal may send the data over communication links to a validation 
point for signature validation and transaction approval. Nfelidation may be done by the human eye or by automatic 
signature recognition equipment. The electronic charge or debit draft information is stored locally on disk 15 for later 
retrieval and batch transmission to an Automated Clearing House (ACH) or other financial institution for processing. 
25 Storage is in encrypted form. For customer records, paper media of the transaction may be provided either by the 
terminal 13 or optionally by printer 22 A printer interface unit 23 may be provided for this purpose. 

As hereinafter described in detail, a uniform message format is used in messages from terminal 1 3 to I/O controller 
33. This message includes a one-byte field BCC which is created by performing an EXCLUSIVE OR operation on other 
fields which specifically identify the transaction. BCC may be used as an encryption key for encoding the digitized 
30 signature and other transaction data, as desired. 

In the preferred embodiment of the invention only the signature is encrypted so as to enable the system to be used 
in an environment including a wide variety of other types of electronic debit equipment. It is contemplated that a trans- 
action-specific encryption key, such as BCC, will be used so as to associate the signature with a particular transaction 
and thereby discourage fraudulent use of a signature which may have been obtained legitimately in connection with a 
35 different transaction. By way of example an account debit may be made in reliance upon an electronically captured 
signature as illustrated in Fig. 6A. 

Fig. 6A represents an LCD display which may be created in connection with a debit transaction or a hard copy 
thereof as printed by printer 22. It will be seen that the display includes a transaction code consisting, for example, of 
two hexadecimal words FB3C and 27A6. The first word might identify a particular merchandising location and perhaps 
40 a time identifier, whereas the second word could be a sequentially assigned number. Thus the code could refer to 
transaction number 27 A6 by store number FB during week 3C. 

The authorizing signature is captured dynamically as a series of time related X-Y coordinates during actual writing 
by the customer. This provides a much better record for later verification than a frozen, picture-type signature of the 
type produced by ordinary bit-mapping. Capturing of the signature begins upon contact of the stylus 26 with digitizer 
45 screen 46, at which time a pair of starting coordinates, Start X and Start Y are generated. These coordinates are 
compared with a series of subsequent coordinates Touch X and Touch Y which are sensed at regularly timed intervals. 
The X and Y differences are stored as a series of digital words. 

After the signature is captured it is encrypted in two phases. In the first phase the two words of the transaction 
code are subjected to an exclusive OR operation (XOR) to obtain a single word encryption key; in this case the key is 
50 found to be DC9A. This key then is XORed against the signature data to obtain an encrypted signature file. This 
effectively imbeds the transaction identification code into the signature. 

The second phase of the encryption process adds security by using a sophisticated encryption technique such as 
the Data Encryption Standard (DES) issued by the U.S. National Bureau of Standards. This phase uses secure en- 
cryption keys known only to the merchant and the financial institution. 
55 At the time of posting the financial institution will first decrypt the DES encryption. Then, since the basic transaction 

data has not been encrypted, the transaction code may be read and XORed to obtain the DC9A XOR key. This key 
then is XORed against the signature file to obtain a readable copy of the authorizing signature. Since the signature 
copy cannot be produced except with the aid of the transaction code, the financial institution knows that the signature 
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was written at the time of the transaction. Consequently the financial institution may safety debit the customer's account 
for the amount of the transaction. Of course, it is also necessary for the financial institution to authenticate the decrypted 
signature by comparing it against a sample signature obtained upon opening the account. As noted above, the dynam- 
ically recorded signature file obtained through use of this invention facilitates automatic signature recognition. 

s A "C language routine for accomplishing the above described EXCLUSIVE OR operation is taught in "Advanced 

Turbo C" t 2nd Ed, Herbert Schildt, Borland Osborne/McGraw- Hill 1989 at pp. 265, 266. DES encryption is well known. 
It uses a 64 bit key and is best performed by a specially configured "hardware* encoder. However, it may be carried 
out in software, if desired. An exampTe of a software implementation of DES encryption in m C language is given in— 
"Numerical Recipes in C, The Art of Scientific Computing", Press et at. Cambridge University Press, 1989, pp. 228-236. 

10 The manner in which the system performs a point of sale transaction will now be described with reference to the flow 
diagram of Fig. 7. As illustrated therein, the sequence begins at start block 1 50 which is the powerup conditbn. The 
idle screen, as defined by the processor program is displayed (1 52). The idle loop continues until a message is received 
from the terminal, block 54. The message can be any of the four general types mentioned above. The type of message 
is identified by the decision three indicated at 156, 158, 160 for DISPLAY, ACCEPT and TRANSMIT. A failure at all 

15 three points produces an UPDATE response, as shown at 1 62. If the message is a DISPLAY message, the information 
in the message, or the stored information designated by the message, is displayed on the LCD 64. The program then 
returns to the idle loop. 

If the message is of the ACCEPT type, then the program checks to determine whether the input is to be via MSR 
or stylus input (165). If it is to be by stylus, then the program checks for stylus activation (166). If the stylus has been 
20 activated, the system proceeds to capture the signature data and echo to the LCD (block 168). This continues until a 
terminal command or a stylus deactivation indicates that the data entry is complete (170). II the test at 165 indicates 
that data is to be accepted from the MSR then the system proceeds to block 167 where the magnetic data is read. 
When the magnetic input is complete, the information is stored and the program returns to idle loop. 

If the message is of the TRANSMIT type, the program checks (172) to determine whether the message is a print 
25 command. If so, a check is made at 174 to determine whether the printing is to be done by the standalone printer or 
by the terminal. At this point the transaction data is formatted and printed by the appropriate device as shown at block 
178 and 1 79. Thereafter if the test at 172 indicates that the message is not a print instruction, the program determines 
if encryption is required (176). The transaction data is encrypted, if appropriate (180) and sent to the terminal (182). 
Thereafter the program returns to the idle loop. If the message is of the UPDATE type, the specific request is determined 
30 and appropriate action is taken after which the program returns to the idle loop. 

A common format is used for all messages from terminal 13. It is as follows: 

[ VLI [ FC ] DATA [ BCC ] 

35 where: 

VLI is a two-byte length of the data portion of the message. The first byte of the VLI field is the upper eight bits of 
the data field length and the second byte is the lower eight bits of the data field length. 

40 

FC is a one-byte function code which specifies the message type and the particular function to be performed. 
DATA is a variable length field of characters that are associated with the function code. This is an optional field 
and may not be present in every message. 

BCC has been mentioned above and is a one-byte field that is the EXCLUSIVE OR of the VLI, FC, and DATA fields. 

45 

Responses by write capture unit 20 to terminal 1 3 follow the same format with exception that the FC field is used 
to return the status of the operation that was requested. The DATA field is also an optional field that may or may not 
be transmitted to the terminal depending on the type of response. 

The following are examples of various message types: 

50 



Message Type 


Codes 


Function Description 


Transmit 


01 . 


Transmit Encrypted Signature Record 


Transmit 


02 


Transmit Printable Signature Data 


Accept 


03 


Accept Signature Data 


Transmit 


04 


Transmit x, y Touch Screen Data 


Transmit 


05 


Resend Last Response 
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(continued) 





Message Type 


Codes 


Function Description 




Update 


06 


Signature Completion Indication 


5 


Transmit 


07 


Transmit Diagnostic Tallies 




Transmit 


08 


Transmit Firmware/Software Identification 


- 


- -Update- 


09 


_Reset Write. Capture Unit (Perform Level 0 Diagnostics) 




Update 


OA 


Accept New Program Load 


10 


Accept 


OB 


Accept MSR Data 


Accept 


OC 


Accept MICR Data 




Display 


11 


Display Stored Image #1 




Display 


12 


Display Stored Image #2 




Display 


13 


Display Stored Image #3 


15 


Display 


22 


Display Full Screen #1 




Display 


23 


Display Full Screen #2 




Display 


31 


Enter Customer Display Mode 




Display 


32 


Display Text (Custon;er Receipt) Data 


20 


Accept 


41 


Accept Card Image #1 Data 


Accept 


42 


Accept Card Image #2 Data 




Accept 


43 


Accept Card Image #3 Data 




Accept 


52 


Accept Full Screen #1 Data 




Accept 


53 


Accept Full Screen #2 Data 


25 


Update 


71 


Receive Encrypted Working Key 




Update 


72 


Receive Key Exchange Key. 




Update 


77 


Receive/Continue Load for Key Exchange Key 




Transmit 


78 


Transmit for Key Status 




Update 


81 


Perform Communications Turnaround Test 


30 


Update 


Al 


Perform Battery Test 




Update 


D1 


Download Record to LCD Memory 




Update 


D6 


Download Record to Processor Memory 




Update 


DC 


Download Character Set 


35 


Update 


D8 


Echo Data to LCD from MSR, Digitizer or MICR Card 



In order to display stylus generated information on the LCD module 48, it is necessary to transform the digitizer 
coordinates into the coordinate system of the LCD module. This process is performed by the PC controller 64. The 
process used to accomplish this transformation is illustrated in the flow diagram of Fig. 8. Performance of this process 
40 is dependent upon obtaining certain constants which are used in equations for this transformation. The process for 
obtaining these constants is shown in Fig. 9, which will be described subsequently. 

The process of Fig. 8 begins with start block 210, and then proceeds to block 212 in which an inquiry is made as 
to whether the stylus 26 is touching the digitizer 46. The process does not continue until the stylus does touch the 
digitizer. When the stylus 26 is touching the digitizer 46, the process continues to block 214, in which the transparent 
45 digitizer coordinates touch X" and "touch V are determined and transmitted by the transparent digitizer controller 
included in block 56 to the PC controller 64. These coordinates represent the instantaneous position of the stylus 26 
on the screen 50, taken at periodic time intervals during movement of the stylus 26. 

The corresponding positional coordinates "led X" and "led Y" for the LCD module 48 are then calculated from 
"touch X" and "touch Y", as represented in block 216. This transformation is accomplished by use of the following 
50 equations: 

1. led X= mx * touch X + bx 

55 

2. led Y= my * touch Y + by 
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where 

led X, led Y are display coordinates, 
touch X, touch Y are digitizer coordinates, 
5 mx, my are scalar constants, 

bx, by are offset constants. 

The method for determining mx, my7bx arid by will be described subsequently in connection with the flow diagram 
of Fig. 9. 

10 The process continues to block 218 where led X and led Y are described on LCD module 48. An inquiry is then 

made (block 220) as to whether a "signature complete" indication has been made, which may be indicated a signal 
generated in the write input apparatus 20 when the signer places the stylus in a designated holder. If the signature is 
complete, the process is concluded (block 224). If the signature is not complete, the process continues via path 222 
to block 212. 

is The constants mx, my, bx and by are determined in accordance with the process set forth in the flow diagram of 

Fig. 9, which proceeds from the start position 230 to display a first point at predetermined LCD module screen coor- 
dinates "led X1" and "led Y1", as represented in block 232. The user then touches this displayed point with the stylus 
26, thus yielding corresponding digitizer coordinates "touch X1 " and touch Y1 ", as represented in block 234. A second 
predetermined point, physically spaced from the first predetermined point, at coordinates "led X2" and "led Y2" is then 

20 displayed (block 236). The user then touches this second displayed point with the stylus 26, thus yielding corresponding 
digitizer coordinates "touch X2" and "touch Y2", as represented in block 238. For maximum accuracy, the tiro prede- 
termined points should be at opposite corners of the planned active area of the screen of the LCD module 48. 

The quantities mx, my, bx and by are then determined, as represented in block 240, in accordance with the following 
equations: 

25 

3. mx = (led X1 - led X2) / (touch X1 - touch X2) 



4. b x = led X1 - mx * touch X1 



5. my= (led Y1 - led Y2) / (touch Y1 - touch Y2) 



6. by = lcdY1 - my * touch Y1 

These constants (mx, my, bx and by) are then stored and used to calculate display coordinates from any subsequent 
digitizer coordinates, as per block 242. The process is then concluded at block 244. 
40 The system and method of the present invention have been disclosed herein primarily in connection with an ar- 

rangement for signature-based payment transactions. However the invention is not limited to such an arrangement 
and could be used in connection with other transactions requiring authorization by a digitized signature. This might 
include, for example, a written order for a public servant to perform an official act. 

It will also be appreciated that while a method and apparatus have been disclosed for creating a transaction- 
's specific encryption of a signature/the invention contemplates quasi specific encryption such as could be accomplished 
by use ol an encryption key which is changed frequently so as to enable an encrypted signature to be correlated with 
time. 



so Claims 

1. Transaction recordal apparatus comprising first generating means (20) for generating a digitized signature record 
.of a signature approving said transaction, characterized by second generating means for generating a digitized 
transaction record representative of said transaction, and means (49) for using said transaction record to encrypt 

55 said signature record so as to provide an encrypted record for supply to signature and transaction verification 

means. 

2. Apparatus according to claim 1 , characterized by means for performing a second encrpytion of said digital record 
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using a predetermined encryption key. 

3. Apparatus according to claim 1 or 2, characterized in that said first generating means comprises a manually op- 
erated stylus (26), and a digitizer (46) for sensing and digitizing the coordinates of said stylus (26). 

s 

4. Apparatus according to claim 3, characterized by display means (48) for presenting a visual image corresponding 
to said signature. 

5. Apparatus according to claim 4, characterized in that first generating means (20) comprises a transparent reference 
io surface (46) for generating position sensing signals in response to moving contact by said stylus (26) which is 

mounted on a liquid crystal display (48) for causing said visual image to be presented in registration with successive 
points of contact between said surface (46) and said stylus (26). 

6. Apparatus according to claim 5, characterized by display means (50) for displaying a visual image corresponding 
15 to said transaction. 



7. A method of recording a transaction, comprising the steps of 

generating a digitized signature record of a signature approving the transaction, and 
20 generating a digitized transaction record representative of the transaction 



characterized by the step of 

generating an encrypted record of the transaction for supply to signature and transaction verification means 
by using said digitized transaction record to encrypt said signature record. 

25 

8. A method according to claim 7, characterized in that the step of generating an encrypted record of the transaction 
includes selecting data from said digitized transaction record and exclusive ORing said data against said digitized 
signature record. 

30 

Patentanspruche 

1. Vorrichtung zur Aufzeichnung von Transaktionen, aufweisend 

eine erste Erzeugungseinrichtung (20) zum Erzeugen einer digitalisierten Unterschriftenaufzeichnung einer Un- 
35 terschrift, mit der die Transaktion genehmigt wird, 

gekennzeichnet durch 

eine zweite Erzeugungseinrichtung zum Erzeugen einer diese Transaktion darstellenden digitalisierten Transak- 
tionsaufzeichnung und eine Einrichtung (49), die die Transaktionsaufzeichnung zur Chiffrierung der Unterschrif- 
tenaufzeichnung verwendet, urn eine chiffrierte Aufzeichnung zur Lieferung an eine Unterschriften- und Transak- 
40 tionsnachweiseinrichtung bereitzustellen. 



2. Vorrichtung nach Anspruch 1 , gekennzeichnet durch eine Einrichtung zum Durchf uhren einer zweiten Chiffrierung 
der digitalen Aufzeichnung unter Verwendung eines vorbestimmten Chiffrierungsschlussels. 

45 3. Vorrichtung nach Anspruch 1 Oder 2, dadurch gekennzeichnet, daG die erste Erzeugungseinrichtung einen von 
Hand gefuhrten Schreibstift (26) und einen Digitalumsetzer (46) zum Abtasten und Digitalisieren der Koordinaten 
des Schreibstiftes (26) aufweist. 

4. Vorrichtung nach Anspruch 3, gekennzeichnet durch eine Anzeigevorrichtung (48) zum Darstellen eines der Un- 
50 terschrift entsprechenden visuellen Bildes. 

5. Vorrichtung nach Anspruch 4, dadurch gekennzeichnet, daG die erste Erzeugungseinrichtung (20) eine transpa- 
rente Bezugsflache (46) zum Erzeugen von Positionsabtastsignalen unter Ansprechen auf einen Bewegungskon- 
takt durch den Schreibstift (26) aufweist, die auf einer Flussigkristallanzeige (48) befestigt ist, um zu bewirken, 

55 daB das visuelle Bild durch Registrierung aufeinanderfolgender Kontaktpunkte zwischen der Flache (46) und dem 

Schreibstift (26) dargestellt wird. 

6. Vorrichtung nach Anspruch 5, gekennzeichnet durch eine Anzeigeeinrichtung (50) zur Anzeige eines der Trans- 
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aklion entsprechenden visuellen Bildes. 

7. Verfahren zur Aufzeichnung von Transaktionen, mil den Schritten: 

Erzeugen einer digitalisierten Unterschrittenaulzeichnung einer Unterschrilt, mit der die Transaktion geneh- 
migt wird; und 

. - Erzeugen einer die Transaktion darstellenden digitalisierten Transaktionsaufzeichnung 

gekennzeichnet durch den Schritt: 

Erzeugen einer chiffrierten Aufzeichnung der Transaktion zur Lieferung an eine Unterschriften- und Transak- 
ttonsnachweiseinrichtung, wobei die digitalisierte Transaktionsaufzeichnung zur Chiffrierung der Unterschrif- 
tenaufzeichnung verwendet wird. 

8. Verfahren nach Anspruch 7, dadurch gekennzeichnet, daB der Schritt Erzeugen einer chiffrierten Aufzeichnung 
der Transaktion das Auswahlen von Daten aus der digitalisierten Transaktionsaufzeichnung und das Setzen dieser 
Daten in Antivalenz zu der digitalisierten Unterschriftenaufzeichnung einschlieBt. 

Revendications 

1. Un appareil d'enregistrement des transactions comprenant un premier moyen de generation (20) pour generer un 
enregistrement de signature numerise d'une signature approuvant ladite transaction, caracterise par un deuxieme 
moyen de generation pour generer un enregistrement de transaction numerise representatif de ladite transaction, 
et un moyen (49) pour utiliser ledit enregistrement de transaction pour chiffrer ledit enregistrement de signature 
de facon a prevoir un enregistrement chiff re pour fourniture au moyen de verification de signature et de transaction. 

2. Un appareil conformement a la revendication 1, caracterise par un moyen pour realiser un deuxieme chiffrage 
dudit enregistrement numerique a I'aide d'une cle de chiffrage predeterminee. 

3. Un appareil conformement a la revendication 1 ou 2, caracterise en ce que ledit premier moyen de generation 
comprend un style actbnne manuellement (26), et un numeriseur (46) pour capter et numeriser les coordonnees 
dudit style (26). 

4. Un appareil conformement a la revendication 3, caracterise par un moyen d'affichage (48) pour presenter une 
image visuelle correspondant a ladite signature. 

5. Un appareil conformement a la revendication 4, caracterise en ce que le premier moyen de generation (20) com- 
prend une surface de reference transparente (46) pour g6ne>er des signaux de captage de position en reponse 
au contact mobile par ledit style (26) qui est monte sur un afficheur a cristaux liquides (48) pour fa ire en sorte que 
ladite image visuelle soit presentee en reperage avec des points de contact successifs entre ladite surface (46) 
et ledit style (26). 

6. Un appareil conformement a la revendication 5, caracterise par un moyen de visualisation (50) pour afficher une 
image visuelle correspondant a ladite transaction. 

7. Une melhode pour enregistrer une transaction, comprenant les etapes de 

la generation d'un enregistrement de signature num6ris6 d'une signature approuvant la transaction, et de 
la generation d'un enregistrement de transaction numerise representatif de la transaction 

caracterisee par I'etape de 

la generation d'un enregistrement chiffre de la transaction pour fourniture a un moyen de verification de la 
signature et de la transaction en utilisant ledit enregistrement de transaction numerise pour chiffrer ledit enregis- 
trement de signature. 

8. Une methode conformement a la revendication 7, caracterisee en ce que I'etape de la generation d'un enregis- 
trement chiffre de la transaction comporte la selection de donnees dudit enregistrement de transaction numerise 
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et la realisation d'une operation OU exclusif sur lesdites donnees par rapport audit enregistrement de signature 
num6rise. 
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FIG. 3 
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FIG. 6 
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FIG. 8 
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FIG. 9 
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